Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HBW10nY7v44d7WvNVkQ8oW4Q9PU.roa
File: HBW10nY7v44d7WvNVkQ8oW4Q9PU.roa (raw, json)
Hash identifier: 83lBiwd5+bknPyaEE2cNqFSnShLr01xbnN/WGiYYMWA=
Subject key identifier: 1C:15:B5:D2:76:3B:BF:8E:1D:ED:6B:CD:56:44:3C:A1:6E:10:F4:F5
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01942823444C4FCF19F55D0E8448C74C84F9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HBW10nY7v44d7WvNVkQ8oW4Q9PU.roa
Signing time: Thu 02 Jan 2025 17:49:47 +0000
ROA not before: Thu 02 Jan 2025 17:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44382
IP address blocks: 31.56.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Jan 2025 07:22:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:44:4c:4f:cf:19:f5:5d:0e:84:48:c7:4c:84:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c15b5d2763bbf8e1ded6bcd56443ca16e10f4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d1:57:a8:dc:81:6c:cf:1c:25:e4:16:05:49:
62:19:5f:18:9f:31:b7:89:9e:ff:64:be:fe:1b:c4:
a6:cd:b6:73:e3:55:a1:a7:bb:06:28:60:d0:3b:00:
0c:32:29:d4:6a:cc:e1:3d:e2:77:bd:62:69:b4:b5:
68:8a:d5:2b:2c:b2:d9:ff:2f:19:32:21:dc:7e:03:
b3:66:82:60:98:ec:b6:50:f1:f3:c7:30:8b:53:3b:
37:27:4e:97:61:84:89:8e:12:1e:e8:aa:da:f6:3b:
7b:2d:94:0a:4b:4c:d3:39:a8:d4:31:4d:e2:1a:02:
39:e8:0f:09:ff:7e:d8:01:41:43:e1:bc:63:b1:b4:
4c:6d:d4:0b:6b:29:95:38:e3:15:25:df:91:a0:29:
c1:49:6a:d7:e4:cc:57:af:b6:8f:c3:15:63:4c:e3:
03:bf:3a:05:c8:35:57:d7:28:c0:fa:fa:ba:45:bf:
f1:0f:f7:cc:a5:d2:d7:dd:51:88:40:fc:4c:04:e2:
73:ea:a9:d2:61:04:4d:ea:fc:7d:53:53:ab:a4:37:
ad:55:16:85:87:8c:7f:45:0e:62:8c:60:91:58:ba:
57:ac:a3:39:f2:64:1f:52:27:8c:ad:9e:39:91:01:
a8:16:01:0b:30:73:52:35:30:fb:c6:ca:26:85:00:
1a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:15:B5:D2:76:3B:BF:8E:1D:ED:6B:CD:56:44:3C:A1:6E:10:F4:F5
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HBW10nY7v44d7WvNVkQ8oW4Q9PU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.85.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:39:d4:3d:8a:65:1c:65:e1:c0:b0:ef:6d:51:df:0c:af:17:
e8:ad:d7:e8:e3:ad:4c:df:c7:56:8c:dc:24:b5:9e:f0:f9:85:
5a:76:52:e0:9f:62:de:5f:fb:28:3f:43:9d:50:a7:0e:24:08:
93:3c:26:cd:fd:bb:a7:5f:2b:cd:e4:eb:f8:b7:19:f9:4f:70:
31:fc:f5:e9:4d:99:3e:3f:29:a2:e0:84:28:1f:58:a0:e5:1b:
3e:d7:b6:b4:8a:00:d3:f5:55:f5:e9:d5:c3:b7:af:4a:5b:de:
c6:d7:cd:0e:3f:ad:ef:22:a2:80:29:00:18:6b:aa:2c:34:a0:
ad:39:ff:1e:51:89:0d:06:d4:01:05:94:e3:49:20:c0:7d:a2:
b4:6b:96:f3:88:32:0f:80:93:7b:df:22:7f:c3:92:e5:f8:07:
da:c4:82:90:56:ad:3f:aa:7a:c2:60:75:4e:b8:06:f1:eb:5b:
30:5a:c4:d0:50:04:73:4b:21:21:aa:29:6c:61:7d:67:22:2d:
6a:c5:04:48:8c:d8:2e:f4:6d:e6:e7:49:27:7a:8c:58:d0:34:
c8:dc:96:82:70:be:e6:52:9b:40:12:d5:a8:e9:07:a0:5e:55:
e3:ea:6e:65:e7:9c:9c:44:fc:f1:4c:0b:48:fe:be:7f:3f:aa:
6a:cf:da:1d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoI0RMT88Z9V0OhEjHTIT5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMTAyMTc0OTQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzE1YjVkMjc2M2JiZjhlMWRlZDZiY2Q1NjQ0M2NhMTZlMTBmNGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutFXqNyBbM8cJeQWBUliGV8YnzG3
iZ7/ZL7+G8SmzbZz41Whp7sGKGDQOwAMMinUaszhPeJ3vWJptLVoitUrLLLZ/y8Z
MiHcfgOzZoJgmOy2UPHzxzCLUzs3J06XYYSJjhIe6Kra9jt7LZQKS0zTOajUMU3i
GgI56A8J/37YAUFD4bxjsbRMbdQLaymVOOMVJd+RoCnBSWrX5MxXr7aPwxVjTOMD
vzoFyDVX1yjA+vq6Rb/xD/fMpdLX3VGIQPxMBOJz6qnSYQRN6vx9U1OrpDetVRaF
h4x/RQ5ijGCRWLpXrKM58mQfUieMrZ45kQGoFgELMHNSNTD7xsomhQAavQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBwVtdJ2O7+OHe1rzVZEPKFuEPT1MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvSEJXMTBuWTd2NDRkN1d2TlZrUThvVzRROVBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzhVMA0G
CSqGSIb3DQEBCwUAA4IBAQCPOdQ9imUcZeHAsO9tUd8Mrxfordfo461M38dWjNwk
tZ7w+YVadlLgn2LeX/soP0OdUKcOJAiTPCbN/bunXyvN5Ov4txn5T3Ax/PXpTZk+
Pymi4IQoH1ig5Rs+17a0igDT9VX16dXDt69KW97G180OP63vIqKAKQAYa6osNKCt
Of8eUYkNBtQBBZTjSSDAfaK0a5bziDIPgJN73yJ/w5Ll+AfaxIKQVq0/qnrCYHVO
uAbx61swWsTQUARzSyEhqilsYX1nIi1qxQRIjNgu9G3m50kneoxY0DTI3JaCcL7m
UptAEtWo6QegXlXj6m5l55ycRPzxTAtI/r5/P6pqz9od
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:50:58 2025 by rpki-client